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(57) [ABSTRACT] 

[OBJECT] To prevent the occurrence of erroneous operation in a replacement HDD 
device and also to detect misconnection, as well, of the HDD device by, when during 

10 the operation of a disk array apparatus, a magnetic disk unit (HDD device) has been 
replaced, constmcting so as to automatically detect the status of the HDD device and, 
simultaneously with this, detect also the defect of a non-volatile memory for storing 
therein information specifying the defective HDD device, etc. 
[SOLVING MEANS] When replacing or repairing a defective HDD device and having 

15 re-closed the power source of the HDD device (Nnew numbered HDD device), a disk 
array controller reads out from the HDD device the characteristic information A(Nnba/) 
for discriminating or identifying this HDD device (step 102), reads out from the Nnew 
numbered non-volatile memory the characteristic information B(Nnew) that is stored 
therein beforehand (step 104), and compares the two with each other (step 106). 

20 

[CLAIMS] 

[Claim 1] A disk anay apparatus controlling method being adapted to control a disk 
array apparatus having a plurality of HDD devices that store data in the way in which 
the data is constructed with use of redundancy, the method including steps of: 
25 with respect to a plurality of first non-volatile memories, which respectively 
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coirespond to the HDD devices, storing, for every HDD device, characteristic 
information used for identifying that HDD device, into the corresponding first 
non-volatile memory; 

storing into a second non-volatile memory, management information used for 
5 collectively managing the statuses of the HDD devices; 

when during the operation of the disk array apparatus, the HDD device that 
has failed has been replaced or repaired and the power source of the replacement or 
repaired HDD device has been re-closed, comparing the characteristic information that 
is stored In the replacement or repaired HDD device and the characteristic information 
1 0 that is stored in the first non-volatile memory corresponding to the replacement or 
repaired HDD device and, when those both coincide with each other, starting 
restoration of that HDD device and, when the both do not coincide with each other, 
reading out the characteristic information from the replacement or repaired HDD 
device and writing the characteristic information that has been read out into the first 
15 non-volatile memory corresponding to the replacement or repaired HDD device; 

when a defect has occurred on any of the HDD devices, when the restoration 
of the HDD device has been started, and when the restoration of the HDD device has 
been ended, rewriting the management information within the second non-volatile 
memory; 

20 when the characteristic information that has been read out from the HDD 

device is written into the first non-volatile memory, comparing the written content 
therein and the content that has now been written thereinto and, when those both do 
not coincide with each other, processing that HDD device as being a defective HDD 
device; and 

25 when the management information is written into the second non-volatile 
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memory, cxjmparing the written content there and the content that has now been 

written there and, when those both do not coincide with each other, processing the disk 

array apparatus as being a defective disk array apparatus. 

[Claim 2] A disk array apparatus controlling method being adapted to control a disk 
5 array apparatus having a plurality of HDD devices that store data in the way in which 

the data Is constmcted with use of redundancy, the method including steps of: 

with respect to a single piece of first non-volatile memory having areas, which 

respectively correspond to the HDD devices, storing, for every HDD device, 

characteristic information used for identifying the HDD device; 
10 storing into a second non-volatile memory, management information used for 

collectively managing the statuses of the HDD devices; 

when during the operation of the disk array apparatus, the HDD device that 

has failed has been replaced or repaired and the power source of the replacement or 

repaired HDD device has t>een re-closed, comparing the characteristic information that 
15 is stored in the replacement or repaired HDD device and the characteristic infomnation 

that is stored in the area of the first non-volatile memory corresponding to the 

replacement or repaired HDD device and, when those both coincide with each other, 

starting restoration of that HDD device and, when the both do not coincide with each 

other, reading out the characteristic information from the replacement or repaired HDD 
20 device and writing the characteristic information that has been read out into the area of 

the first non-volatile memory corresponding to the replacement or repaired HDD 

device and starting the restoration; 

when a defect has occurred on any of the HDD devices, when the restoration 

of the HDD device has t)een started, and when the restoration of the HDD device has 
25 been ended, rewriting the management information within the second non-volatile 
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memory; 

when the characteristic infomnation that has been read out from the HDD 
device is written into the first non-volatile memory, comparing the written content 
therein and the content that has now been written thereinto and, when those both do 
5 not coincide with each other, processing the disk array apparatus as being a defective 
disk array apparatus; and 

when the management information is written into the second non-volatile 
memory, comparing the written content there and the content that has now been 
written there and, when those both do not coincide with each other, processing the disk 
1 0 array apparatus as being a defective disk array apparatus. 

[Claim 3] A disk anray apparatus controlling method being adapted to control a disk 
array apparatus having a plurality of HDD devices that store data in the way in which 
the data is constructed with use of redundancy, a logical drive being set as a collection 
of the HDD devices constructing respective with-useof-redundancy data divisions, the 
1 5 method including steps of: 

with respect to a plurality of first non-volatile memories, which respectively 
correspond to the HDD devices, storing, for every HDD device, characteristic 
information used for identifying that HDD device, into the corresponding first 
non-volatile memory; 

20 storing into a second non-volatile memory, management information used for 

collectively managing the statuses of the HDD devices; 

when during the operation of the disk array apparatus, the HDD device that 
has failed has been replaced or repaired and the power source of the replacement or 
repaired HDD device has been re-closed, comparing the characteristic information that 

25 has been read out from the replacement or repaired HDD device and each of all items 



4 



of the characteristic information that is stored in the first non-volatile memory and, when 
no characteristic Information that coincides exists, starting restoration of that HDD 
device and, when there is the characteristic information two items of characteristic 
information of which coincide v^th each other, confirming that there do not exist in a 
5 respective one of the logical drives, two or more of the HDD devices that are defective 
and, when there do not exist in a respective one of the logical drives, two or more of the 
HDD devices that are defective, starting restoration of the replacement or repaired 
HDD device and, when there exist in any one of the logical drives, two or more of the 
HDD devices that are defective and when there do not exist two or more of the HDD 

1 0 device that are defective in the logical drive in which there is the first non-volatile 
memory, the characteristic information of which has coincided with the characteristic 
information of the replacement or repaired HDD device, starting the restoration of this 
HDD device and, when, in that case, there exist two or more of the HDD devices that 
are defective, not performing the restoration of the relevant HDD devices; 

15 when a defect has occurred on any of the HDD devices, when the restoration 

of the HDD device has been started, and when the restoration of the HDD device has 
been ended, rewriting the management information within the second non-volatile 
memory; 

when the characteristic information that has been read out from the HDD 
20 device is written into the first non-volatile memory, comparing the written content 

therein and the content that has now been written thereinto and, when those both do 
not coincide with each other, processing the HDD device as being a defective HDD 
device; and 

when the management information is written into the second non-volatile 
25 memory, comparing the written content there and the content that has now been 
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written there and, when those both do not coincide with each other, processing the disk 
array apparatus as being a defective disk array apparatus. 
[Claim 4] A disk array apparatus controlling method being adapted to control a disk 
array apparatus having a plurality of HDD devices that store therein data in the way in 
5 which the data is constnjcted with use of redundancy, a logical drive t)eing set as a 
collection of the HDD devices constructing respective with-useK)f-redundancy data 
divisions, the method including steps of: 

with respect to a single piece of first non-volatile memory having areas, which 
respectively correspond to the HDD devices, storing, for every HDD device, 

1 0 characteristic information used for identifying the HDD device; 

storing into a second non-volatile memory, management information used for 
collectively managing the statuses of the HDD devices; 

when during the operation of the disk array apparatus, the HDD device that 
has failed has been replaced or repaired and the power source of the replacement or 

15 repaired HDD device has been re-closed, comparing the characteristic information that 
has been read out from the replacement or repaired HDD device and each of all items 
of the characteristic information that is stored in the first non-volatile memory and, when 
no characteristic information that coincides exists, starting restoration of that HDD 
device and, when there is the characteristic information two items of characteristic 

20 information of which coincide with each other, confirming that there do not exist in a 
respective one of the logical drives, two or more of the HDD devices that are defective 
and, when there do exist in a respective one of the logical drives, two or more of the 
HDD devices that are defective, starting restoration of the replacement or repaired 
HDD device and, when there exist in any one of the logical drives, two or more of the 

25 HDD devices that are defective and when there do not exist two or more of the HDD 
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device that are defective in the logical drive in which there is the first non-volatile 
memory, the characteristic infomiation of which has coincided with the characteristic 
infomiation of the replacement or repaired HDD device, starting the restoration of this 
HDD and, when, in that case, there exist two or more of the HDD devices that are 
5 defective, not perfomiing the restoration of the relevant HDD devices; 

when a defect has occurred on any of the HDD devices, when the restoration 
of the HDD device has been started, and when the restoration of the HDD device has 
been ended, rewriting the management information within the second non-volatile 
memory; 

1 0 when the characteristic information that has been read out from the HDD 

device is written into the first non-volatile memory, comparing the written content 
therein and the content that has now been written thereinto and, when those both do 
not coincide with each other, processing the disk array apparatus as being a defective 
disk array apparatus; and 

1 5 when the management information is written into the second non-volatile 

memory, comparing the written content there and the content that has now been 
written there and, when those both do not coincide with each other, processing the disk 
array apparatus as being a defective disk array apparatus. 
[Claim 5] A disk array apparatus including: 

20 a plurality of HDD devices that store therein data in the way in which the data 

is constructed with use of redundancy; 

a plurality of first non-volatile memories each of which is provided for every 
HDD device and stores therein characteristic infomiation used for identifying the 
corresponding HDD device; 

25 a second non-volatile memory for storing therein management information 
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used for collectively managing tlie statuses of the HDD devices; 

an HDD device automatic restoration starting unit that, when during the 
operation of the disk array apparatus, the HDD device that has failed has been 
replaced or repaired and the power source of the replacement or repaired HDD device 
5 has been re-closed, compares the characteristic infomnation that has been read out 
from the replacement or repaired HDD device and the characteristic information that is 
stored in the first non-volatile memory con^esponding to the replacement or repaired 
HDD device and, when those both coincide with each other, starts restoration of that 
HDD device and, when the both do not coincide with each other, reads out the 
10 characteristic information from the replacement or repaired HDD device and writes the 
characteristic information that has been read out into the first non-volatile memory 
corresponding to the replacement or repaired HDD device, and starts restoration of this 
HDD device; 

a characteristic information write-in unit that reads out the characteristic 
15 information from the HDD device and writes it into the first non-volatile memory 
corresponding to that HDD device; 

a management information rewrite unit that, when a defect has occurred on 
any of the HDD devices, when the restoration of the HDD device has been started, 
and when the restoration of the HDD device has been ended, rewrites the content of 
20 the management information; 

a characteristic information write-in defect detection unit that, when the 
characteristic information that has been read out from the HDD device is written into 
the first non-volatile memory, compares the written content therein and the content that 
has now been written thereinto and, when those tx)th do not coincide with each other, 
25 processes that HDD device as being a defective HDD device; and 
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a management infomiation \Amte-in defect detection unit that, when the 
management infomnation is written into the second non-volatile memory, compares the 
written content there and the content that has now been written there and, when those 
both do not coincide with each other, processes the disk array apparatus as being a 
5 defective disk array apparatus. 

[Claim 6] A disk array apparatus including: 

a plurality of HDD devices that store therein data in the way in which the data 
is constructed with use of redundancy; 

a single piece of first non-volatile memory that, for storing therein characteristic 
10 information used for identifying the HDD devices, is commonly provided with respect to 
the HDD devices and that has areas each corresponding to a respective one of the 
HDD devices; 

a second non-volatile memory for storing therein management information 
used for collectively managing the statuses of the HDD devices; 

15 an HDD device automatic restoration starting unit that, when during the 

operation of the disk array apparatus, the HDD device that has failed has been 
replaced or repaired and the power source of the replacement or repaired HDD device 
has been re-closed, compares the characteristic infomiation that is stored in the 
replacement or repaired HDD device and the characteristic information that is stored in 

20 the area corresponding to the relevant HDD device in the first non-volatile memory and, 
when those both coincide with each other, starts restoration of that HDD device and, 
when the t)oth do not coincide with each other, reads out the characteristic information 
from the replacement or repaired HDD device and writes the characteristic information 
that has been read out into the area coriBsponding to the replacement or repaired 

25 HDD device, of the first non-volatile memory, and starts restoration of this HDD device; 
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a characteristic information write-in unit that reads out the characteristic 
information from the HDD device and writes it into the area corresponding to this HDD 
device, of the first non-volatile memory; 

a management information rewrite unit that, when a defect has occurred on 
5 any of the HDD devices, when the restoration of the HDD device has been started, 
and when the restoration of the HDD device has been ended, rewrites the content of 
the management information; 

a non-volatile memory information write-in defect detection unit that, when the 
characteristic information that has been read out from the HDD device is written into 
10 the first non-volatile memory, compares the written content therein and the content that 
has now been written thereinto and, when those both do not coincide with each other, 
processes the disk array apparatus as being a defective disk array apparatus; and 

a management information write-in defect detection unit that, when the 
management information is written into the second non-volatile memory, compares the 
15 written content there and the content that has now been written there and, when those 
tx)th do not coincide with each other, processes the disk array apparatus as being a 
defective disk array apparatus. 
[Claim 7] A disk array apparatus including: 

a plurality of HDD devices that store therein data in the way in which the data 
20 is constructed with use of redundancy; 

a plurality of first non-volatile memories each of which is provided for every 
HDD device and stores therein characteristic information used for identifying the 
corresponding HDD device; 

a second non-volatile memory for storing therein management infomiation 
25 used for collectively managing the statuses of the HDD devices; 



a replacement HDD device automatic restoration start detemiination unit that, 
when during the operation of the disk array apparatus, the HDD device that has failed 
has t^een replaced or repaired and the power source of the replacement or repaired 
HDD device has been re-closed, compares the characteristic information that has 
5 been read out from the replacement or repaired HDD device and each of all the 
characteristic infomiation that is stored in the first non-volatile memory and, when no 
characteristic information that coincides exists, starts restoration of that HDD device 
and, when there is the characteristic information two items of characteristic infomiation 
of which coincide with each other, confirms that there do not exist in a respective one of 

1 0 the logical drives, two or more of the HDD devices that are defective and, when there 
do not exist in a respective one of the logical drives, two or more of the HDD devices 
that are defective, starts restoration of the replacement or repaired HDD device and, 
when there exist in any one of the logical drives, two or more of the HDD devices that 
are defective and when there do not exist two or more of the HDD device that are 

15 defective in the logical drive in which there is the first non-volatile memory, the 

characteristic information of which has coincided with the characteristic information of 
the replacement or repaired HDD device, starts the restoration of this HDD and, when, 
in that case, there exist two or more of the HDD devices that are defective, does not 
perform the restoration of the relevant HDD devices; 

20 a charaderistic information writeHn unit that reads out the characteristic 

infomiation from the HDD device and writes it into the first non-volatile memory 
coHBSponding to that HDD device; 

a management information rewrite unit that, when a defect has occurred on 
any of the HDD devices, when the restoration of the HDD device has been started, 

25 and when the restoration of the HDD device has been ended, rewrites the content of 



the management infomnaWon; 

a characteristic infomiation write-in defect detection unit that, when the 
characteristic information that has been read out from the HDD device is written into 
the first non-volatile memory, compares the written content therein and the content that 
5 has now been written thereinto and, when those both do not coincide with each other, 
processes that HDD device as being a defective HDD device; and 

a management information write-in defect detection unit that, when the 
management information is written into the second non-volatile memory, compares the 
written content there and the content that has now t>een written there and, when those 
10 both do not coincide with each other, processes the disk array apparatus as be\ng a 
defective disk array apparatus, the logical drive being set as a collection of the HDD 
devices construct'ng respective with-use-of-redundancy data divisions. 
[Claim 8] A disk array apparatus including: 

a plurality of HDD devices that store therein data in the way in which the data 
15 is constructed with use of redundancy; 

a single piece of first non-volatile memory that, for storing therein characteristic 
information used for identifying the HDD devices, is commonly provided with respect to 
the HDD devices and that has areas each corresponding to a respective one of the 
HDD devices; 

20 a second non-volatile memory for storing therein management information 

used for collectively managing the statuses of the HDD devices; 

a replacement HDD device automatic restoration start determination unit that, 
when during the operation of the disk array apparatus, the HDD device that has failed 
has been replaced or repaired and the power source of the replacement or repaired 

25 HDD device has been re-closed, compares the characteristic information that is stored 



in the replacement or repaired HDD device and each of all the characteristic 
information that is stored in the first non-volatile memory and, when no characteristic 
information that coinddes exists, starts restoration of that HDD device and, when there 
is the characteristic information, two items of characteristic information of which 
5 coincide with each other, confirms that there do not exist in a respective one of the 
logical drives, two or more of the HDD devices that are defective and, when there do 
not exist in a respective one of the logical drives, two or more of the HDD devices that 
are defective, starts restoration of the replacement or repaired HDD device and, when 
there exist in any one of the logical drives, two or more of the HDD devices that are 

1 0 defective and when there do not exist two or more of the HDD device that are defective 
in the logical drive in which there is the first non-volatile memory, the characteristic 
information of which has coincided with the characteristic information of the 
replacement or repaired HDD device, starts the restoration of this HDD and. when, in 
that case, there exist two or more of the HDD devices that are defective, does not 

15 periderm the restoration of the relevant HDD devices; 

a characteristic information write-in unit that reads out the characteristic 
Information from the HDD device and writes it into the area in the first non-volatile 
memory corresponding to that HDD device; 

a management information rewrite unit that, when a defect has occurred on 

20 any of the HDD devices, when the restoration of the HDD device has been started, 
and when the restoration of the HDD device has been ended, rewrites the content of 
the management information; 

a non-volatile memory information write-in defect detection unit that, when the 
characteristic information that has been read out from the HDD device is written into 

25 the first non-volatile memory, compares the written content therein and the content that 
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has now been written thereinto and, when those both do not coincide with each other, 
processes the disk array apparatus as being a defective disk array apparatus; and 

a management information write-in defect detection unit that, when the 
management information is written into the second non-volatile memory, compares the 
5 written content there and the content that has now been written there and, when those 
both do not coincide with each other, processes the disk array apparatus as being a 
defective disk array apparatus, the logical drive being set as a collection of the HDD 
devices constructing respective with-use-of-redundancy data divisions. 

10 [0021] 

[PROBLEMS THAT THE INVENTION IS TO SOLVE] However, in the 
above-described conventional disk array system, when having replaced a defective 
HDD device, there is adopted a method of once turning off the power source of the 
disk array apparatus, then rebooting the disk array apparatus as a whole, and thereby 

1 5 starting restoration of that relevant HDD device. However, most of the disk array 
apparatuses each have a plurality of logical drives and there are cases where those 
apparatuses are being operated over a period of 24 hours. In those cases, in the 
case of each of the abovenjescribed disk array systems, it happens that, even when a 
defective HDD device occurs in one logical drive, the power source of the disk array 

20 apparatus cannot be turned off. Resultantly, there occurs the inconvenience that the 
restoration of the defective HDD device cannot be performed. 
[0022] In addition, when defective HDD devices exist within a plurality of logical drives 
within one disk array apparatus and when an attempt is made to replace those 
defective HDD devices, it is considered as being possible that other than the defective 

25 HDD devices, a normal HDD device may be drawn off. Since the HDD device that 



has been erroneously drawn away normally operates in repair or in examination, it is 
attempted to return it to the original position of the disk array apparatus. Although, at 
this time, no problem ocxxjrs where another defective HDD device doesn't exist within 
the logical drive from which the normal HDD device that has been erroneously drawn 
5 away exists, when such a defective HDD device exists, it results that the 

with-use-of-nedundancy data constmction is lost. In this case, unless the data of the 
HDD device that has been erroneously drawn off is changed, restoration of the data 
can be restored through the use of manpower. However, when having loaded that 
normal HDD device with respect to a position of loading of another logical drive, since 

10 that HDD device normally operates, it is possible that one will start the restoration as 
the system is. However, in this case, the with-use-of-fedundancy data constmction of 
the logical drive in which the HDD devices that are all normal that has until then existed 
collapses. This leads to the inconvenience that even restoration using manpower 
becomes impossible. 

1 5 [0023] It is the object of the present invention to improve the above-described 

inconvenience that the conventional disk array apparatus has, especially to provide a 
disk array apparatus that, during the operation of the disk array apparatus, enables 
appropriately executing the restoration processing according to the status of the HDD 
devices that are relevant thereto. 

20 [0024] Concretely, when during the operation of the disk array apparatus, an HDD 
device has been replaced, there is adopted a method of automatically detecting the 
status of the HDD device and, simultaneously with this, also detecting defects of the 
non-volatile memory, as well, thereby preventing the occurrence of an erroneous 
operatfon of the replacement HDD device leading to enhancement of the reliability of 

25 the system. Also, by detecting the misconnection. as well, of the HDD devices, it is 



aimed to prevent the relevant data from being lost due to the human mistakes, thereby 
enhancing the reliability of the system. 

[0038] 

[Embodiment of the Invention] Next, a pnefemed embodiment of the present invention 
vvill be explained with reference to the drawings. Fig. 1 is a block diagram that shows 
the construction of a disk array apparatus according to an embodiment of the present 
invention. 

[0039] A disk array apparatus 1 1 shown In Fig. 1 is equipped with an interface 12 that 
is used for connection thereof with a higher-order device 21 , a disk array controller 13, 
an n number of HDD devices ^4^ to 14n, non-volatile memories 15i to 15n that 
correspond to the respective HDD devices 14i to 14n, and a non-volatile memory 19 
that stores therein management information. A request to access (a request to read 
out or a request to write in) the disk array apparatus 1 1 from the higher-order device 21 
is input to the disk array controller 13 via the interface 12. 

[0040] The disk array controller 1 3 has a mechanism that, according to the content of 
the request from the higher-order device 21 , controls the respective HDD devices 14i 
to 14n and performs read-out or write-in of data, a mechanism that, according to the 
information within the non-volatile memory 19, determines the status of the HDD 
devices 14i to 14n, and a mechanism that, according to the information within the 
non-volatile memories 15i to 15n and Hie characteristic infomiation 20i to 20n of the 
HDD devices 1 4i to 1 4n, determines the status of tie HDD device. Incidentally, these 
mechanisms of \he disk array contiToller 1 3 are constructed of a processor for use for 
perfonning control, a program memory having stored tiierein a program that defines 
tiiat conbTolling processor, a memory having stored therein parameters that are used 
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when the apparatus operates, an interface for performing read-out or write-in with 
respect to the HDD devices 14i to 14n, an interface that is used with respect to the 
non-volatile memories 15i to 15n corresponding to the HDD devices 14i to 14n 
respectively, and an interface used with respect to the non-volatile memory 19 for 
5 storing therein the management information. The characteristic information 20i to 20n 
are respectively stored within the HDD devices 14i to 14n. 

[0041] This disk array apparatus 11 is a type with respect to which one or a plurality of 
logical drives can be set. The logical drive is the one a single piece of which is set as 
a collection of the HDD devices that construct their respective with-use-of-redundancy 
10 data divisions. 

[0042] First using a flow chart of Fig. 2, the operation of this disk array apparatus the 
logical drive of which is one in number will be explained, taking up as an example a 
process that is executed when during the operation of the disk array apparatus, the 
power source of a single piece of HDD device has been re-closed. 

15 [0043] In this disk array apparatus, for managing the respective HDD devices, 

non-volatile memories, etc., parameters such as a counter i, and data arrangements 
A(i), B(i), C(i), and D(i) are used. The counter i is a parameter for identifying the HDD 
device. A characteristic infomnation arrangement that stores characteristic infomiation 
of the HDD devices, characteristic information arrangement that stores the 

20 characteristic information in the non-volatile memories, management information 
anangement that stores management information for a defective one of the HDD 
devices, and management information arrangement that stores management 
infomnation for one of the HDD devices that is destined for restoration are represented 
by A(i), B(i), C(i), and D(i), respectively. For temporarily storing these parameters 

25 there is used a memory within the disk array controller 1 3. Also, in the disk anciy 
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controller 13, an HDD device automatic restoration starting unit that starts automatic 
restoration of the HDD devices 14i to 14n, a characteristic information write-in unit that 
reads out characteristic infomnation from the HDD devices 14i to 14n and writes it into 
the non-volatile memories 15i to 15n, a management infomnation rewrite unit that 
5 rewrites the management infomnation stored in the non-volatile memory 19, a 

characteristic infomnation write-in defect detection unit that detects a defect at the time 
of white of characteristic information into the non-volatile memories 15i to 15n, and a 
management information write-in defect detection unit that detects a defect at the time 
of write of management infomnation into the non-volatile memory 19, are constmcted 

10 by the above-described controlling processor. 

[0044] When during the operation of the disk array apparatus, the power source of the 
HDD device has been re-closed, the disk array controller 13, first, sets the identification 
number of the HDD device, the power source of which has been re-closed, to be the 
parameter Nnew and sets "1 " to the counter i (step 101). And, the disk array controller 

15 13 reads out the characteristic infomnation A (Nnew) from the Nnew numbered HDD 
device (the HDD device the power source of which has been re-closed) (step 102), 
and determines whether that read-out has normally been perfomned (step 103). 
When the readout of the characteristic information A (Nnew) frorn the Nnew numbered 
HDD device has not nomnally been performed, the operation flow proceeds to step 112. 

20 When having normally read out the characteristic information A (Nnew), the controller 
13 reads out the characteristic information B (Nnew) from the Nnew numbered 
non-volatile memory (a relevant one of the non-volatile memories 15i to 15n) (step 104) 
and determines whether the read-out from the non-volatile memory 1 5 has normally 
t)een performed (step 105). 

25 [0045] When at step 1 05 the characteristic information B(Nnew) has not normally been 



read out fnom the Nnew numbered non-volatile memory, the flow proceeds to step 112. 
On the other hand, when the characteristic infomriation B(Nnew) has nomnally been 
read out from the Nnew numbered non-volatile memory, the controller 13 compares the 
characteristic infomiation A(Nnew) of the Nnew numbered HDD device and the 
characteristic information B(Nnew) of the Nnew numbered non-volatile memory (step 
1 06). When the both coincide, the flow proceeds to step 1 09. When at step 1 06 the 
A(Nnew) and the B(Nnew) do not coincide with each other, the characteristic information 
A(Nnew) of the Nnew numbered HDD device is set as the characteristic information 
B(Nnew) of the Nnew numt)ened non-volatile memory and the characteristic information 
B(Nnew) is written into the Nnew numbered non-volatile memory (step 107) and it is 
determined whether this write-in has normally been performed (step 1 08). When the 
write-in of the characteristic information B(Nnew) into the Nnew numbered non-volatile 
memory has normally been performed, the flow proceeds to step 1 09. When that 
write-in has not normally been performed, the flow proceeds to step 1 1 2, When that 
write-in has not normally been performed, it means that the status of the Nnew 
numbered HDD device is the one that has existed before the re-closure of the power 
source thereof, i.e., the status of the defective HDD device. 
[0046] At step 109, "1" is set as the management information D(Nnew) indicating the 
status of restoration of the Nnew numbered HDD device destined for restoration, and 
that management information D(Nnew) is written into the non-volatile memory 19 that 
stores the management information, and it is detemiined whether that write-in has 
normally been performed (step 1 1 0). When the management information D(Nnew) 
indicating the status of restoration has not nomnally been written into the non-volatile 
memory 19 storing the management information therein, the operation flow proceeds 
to step 112. On the other hand, when that write-in has normally been performed at 
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step 110. the operation flow proceeds to step 111, in which the restotBtion is started. 
[0047] At step 1 1 2, the controller 1 3 reports an error message and terminates the 
process. At this time, when the characteristic information A(Nnew) has failed to be 
read out from the Nnew numbered HDD device, and read-out and write-in with respect 
to the Nnew numt)ered non-volatile memory have failed to be performed, they 
correspond to the status of the Nnew numbered HDD device that has existed before 
re-closure of the power source, i.e. the status where the HDD device is defective. 
When write of the management information D(Nnew) into the non-volatile memory 19 
has failed to be performed, it Is defined that the disk array apparatus be defective. 
The method of reporting the error message includes a method of reporting the status 
to the higher-order device 21 and a method of making an LED disf^ay However, any 
method is more preferable if that method can make it acknowledged which position of 
the defective HDD device is located in or that the disk array apparatus is defective. 
[0048] In this disk array apparatus, as the management information C(i) indicating the 
status of the HDD device that is defective, written into the non-volatile memory 19, and 
the management information D(i) indicating the status of the HDD that is under 
restoration, a bit indicating that the HDD device Is defective and a bit indicating that the 
HDD device is under restoration are used, respectively in corresponding relationship to 
tiiose HDD devices. When all the HDD devices are normally operating, the bit 
representing the management information C(i) indicating the defective HDD device 
and Uie bit representing the management information D(i) indicating ttie HDD device 
under restoration are all "0". When tiiere is a defective HDD device, \he bit 
representing the management information C(i) Uiat corresponds to that defective HDD 
device is "1" and the bits representing tiie management information D(i) indicating tiie 
HDD device under restoration are all "0". Also, regarding the HDD device that is 
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under restoration, although the bits representing the management information D(i) 
indicating the HDD device under restoration are all "1", the HDD devices that are under 
restoration and the bits conesponding to that are "1" are only one in number. 
[0049] Also, in this disk array apparatus, as the characteristic information A(i) of the 
5 HDD device and the characteristic information B(i) of the non-volatile memory 1 5, there 
is used 36-byte inquiry data that includes the vendor name and serial number. 
However, the data representing the characteristic information is not limited thereto. 
For example, using a random number, using a slot number, or using information that 
represents date and time is possible. However, in such cases, it is preferable to use 

10 data representing the characteristic information corresponding to the HDD device, tiie 
use of which reliably discriminates the characteristic information for every HDD device. 
[0050] Next, using flow charts of Figs. 3 and 4, the operation of this disk array 
apparatus when the apparatus has two or more logical drives will be explained, taking 
up as an example a process that is executed when during the operation of the disk 

15 array apparatus, the power source of one HDD device has been re-closed. 

[0051] Figs. 3 and 4 as a whole show a single sheet of flow chart and, by the encircled 
symbols P and Q, the mutual connection relationship between the two is shown, and 
those figures show the flow of the operation of the disk array controller 1 3. 
[0052] Here, for managing the respective HDD devices, non-volatile memories, etc., 

20 there are used parameters such as counter i, counter], counter Nj, and counter Nequal 
and data arrangements A(i). B(i), C(i), D(i) and E(i). The counter i is a parameter for 
identifying an HDD device and the counter] is a parameter for identifying a logical drive 
within the apparatus. The counter] is set in the way of being related to the counter 1 
used for identifying the HDD device, depending on the conditions on which the 

25 apparatus is constructed. A characteristic information anangement that stores 



characteristic information of the HDD devices, characteristic information arrangement 
that stores the characteristic information in the non-volatile memories, management 
information arrangement that stores management information for a defective one of 
the HDD devices, management information arrangement that stores management 
5 information for one of the HDD devices that is destined for restoration, and 

arrangement E(i) used for identifying the number of the HDD device whose power 
source has been re-closed and whose characteristic information has coincided with 
that stored in the non-volatile memory are represented by A(i), B(i), C(i), D(i), and E(i), 
respectively Further, the counter used for investigating the number of the defective 

10 HDD devices located within the j-numbered logical drive is represented by Nj, and the 
temporary counter is represented by Nequal^ For temporal storage of those 
parameters, a memory within the disk array controller 1 3 is used. Also, in the disk 
anray controller 13, a replacement HDD device restoration starting unit that starts 
automatic restoration of the HDD devices 14i to 14n, a characteristic information 

15 write-in unit that reads out characteristic information from the HDD devices 14i to 14n 
and writes it into the non-volatile memories ^5^ to 15n, a management infomiation 
rewrite unit that rewrites the management information stored in the non-volatile 
memory 1 9, a characteristic information write-in defect detection that that detects a 
defect at the time of write of the characteristic information into the non-volatile 

20 memories 1 5i to 1 5n, and a management information write-in defect detectton unit that 
detects a defect at the time of write of management information into the non-volatile 
memory 19, are constructed by the above-described controlling processor. 
[0053] When during the operation of the disk array apparatus, the power source of the 
HDD device has been re-closed, the disk array controller 13, first, sets the identification 

25 number of the HDD device, the power source of which has been re-closed, to be the 



22 



parameter Nnew and sets "1 " to the HDD device identification counter i. With respect 
to the arrangement E(i) used for identifying the number of the HDD device whose 
power source has been ne-closed and whose characteristic infomriation has coincided 
with that stored in the non-volatile memory, "0" is set , and "0" is set with respect to the 
5 counter Nj used for investigating the number of the defective HDD devices located 
within the j-numbered logical drive, and "0" is set with respect to the temporary counter 
Nequal (step 201 ). And, the disk array controller reads out from the Nnew numbered 
HDD device the characteristic information A(Nnew) that corresponds thereto (step 202) 
and determines whether that read-out has normally been performed (step 203). Here, 

10 when that read-out has not nonnally been performed, the controller 1 3 reports to the 
higher-order device 21 an error message to the effect that the relevant HDD device is a 
defective one (step 31 7) and terminates the processing. When the read-out of the 
characteristic information A(Nnew) from the Nnew numbered HDD device has normally 
been performed, the controller 13 reads out the characteristic information B(i) from the 

1 5 i-numbered non-volatile memory 1 5 (step 204) and determines whether read-out from 
tiiat non-volatile memory 15 has normally been performed (step 205). 
[0054] When at step 205 the read-out of the characteristic information B(i) from the 
i-numbered non-volatile memory 15 has not normally been performed, the operation 
flow proceeds to step 21 0. On tiie other hand, when tiiat read-out has normally been 

20 performed at step 205, the controller 1 3 compares the characteristic information 
A(Nnew) of the HDD device, the power source of which has been re-closed and the 
characteristic information B(i) that is stored in the i-numbered non-volatile memory 
(step 206). When those both coincide, "1 " is set to the E(i), "1 " is added to the 
temporary counter Nequal* and "1 " is added to the counter Nj for investigating \he 

25 number of \he defective HDD devices located within tiie j-numbered logical drive (step 
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216), then the flow proceeds to step 21 7. In contrast to this, when at step 206 the 
A(Nnew) and B(i) characteristic information do not coincide, the controller 13 reads out 
the management information C(i) for the defective HDD device from the non-volatile 
memory 19 (step 207) and determines whether that read-out has normally been 
5 performed. When the read-out of the management information C(i) for the defective 
HDD device from the non-volatile memory 19 has not normally been performed, the 
controller 13 reports to the higher-order device 12 an error message to the effect that 
the current disk array apparatus is a defective one (step 317), and terminates this 
processing. When at step 208 the read-out of the management information C(i) has 

1 0 normally been performed, the controller 1 3 determines v\/hettier friat management 
infomiation C(i) indicating a defective HDD device is "1 " (step 209). If the C(i) = "1 
the flow proceeds to step 215. If at step 209 C(i) "1 the flow proceeds to step 21 7. 
[0055] At step 21 0, the controller 1 3 reads out the management information C(i) for the 
defective HDD device from the non-volatile memory 19 and determines at step 211 

1 5 whether that read-out has normally been performed. Here, when read-out of the 
management information C(i) from the non-volatile memory 19 has not normally been 
performed, the controller 13 reports to the higher-order device 21 an error message to 
the effect that the current disk array apparatus is a defective one (step 317), and 
terminates the processing. On the other hand, when at step 21 1 that read-out has 

20 nomially been performed, the controller 1 3 determines whether that management 
information C(i) indicating a defective HDD device is "1" (step 212). If the C(i) = "1", 
the flow proceeds to step 215. If C(i) ^ "1 "1 " is set as the management information 
C(i) indicating a defective HDD device, the controller 13 writes that C(i) into the 
non-volatile memory 19 (step 213), and determines whether that write-in has normally 

25 been performed (step 214). When the write-in of that management information C(i) 
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has normally been performed, the flow proceeds to step 215. When having not 
normally been performed, the controller 1 3 reports to the higher-order device 21 an 
error message to the effect of being a defective disk array apparatus (step 31 7), and 
terminates this processing. 
5 [0056] At step 21 5, "1 " is added to the counter Nj for investigating the number of 
defective HDD devices existing within the j-numbered logical drive, then the flow 
proceeds to step 217. The logical drive identification counter j is derived from the 
apparatus construction conditions and HDD device number 1, 
[0057] At step 217, in order to repeat the above-described preceding processing 

10 operations with respect to a respective one of all the HDD devices, "1 " is added to the 
counter i for identifying the HDD devices. And the disk array controller 1 3 determines 
whether the value of the counter i after that addition has been performed is equal to or 
smaller than the number of all the HDD devices (step 21 8). If the value of the i is 
equal to or smaller than the number of all the HDD devices, the flow proceeds to step 

1 5 204. If the value of the counter i is greater than the number of the HDD devices, the 
flow proceeds to step 301 . 

[0058] At step 301 , the controller 1 3 detemiines whether the temporary counter Nequal 
is "0". Here, if the Nequal'="0". the flow proceeds to step 312. In this case, it results 
that the characteristic information A(Nnew) of tiie HDD de>^ce the power source of 

20 which has been re-closed is different from any one item of information of the 

characteristic information B(i) stored in the non-volatile memory. On the oUier hand, if 
at step 301 Nequal "0", "1 " is set to tiie counter] for identifying the logical drive wiUiin 
tiie disk array apparatus and "0" is set to tiie temporary counter Nequal (step 302). 
Then, ttie number of tine first HDD device of ttie logical drive j is set wiUi respect to tiie 

25 counter i for identifying the HDD (step 303). tiien tiie flow proceeds to step 304. 
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[0059] At step 304, the disk array controller 13 determines whether the airangement 
E(i) used for identifying the number of the HDD device whose power source has been 
ne-closed and whose characteristic information has coincided with that stored in the 
non-volatile memory is "1 ". If the E(i) 9t 1 , "1 " is added to the counter i for identifying 
5 the HDD device (step 305), then the controller 13 determines whether the counter i is 
not above the final HDD device of the logical drive j (step 306). If the counter i is not 
above the final HDD device of the logical drive j, in order to repeat the above-described 
preceding processing operations with respect to a respective one of the HDD devices 
that belong to the logical drive j, the flow returns to step 304. If the counter i is above 

10 the final HDD device of the logical drive j, the flow proceeds to step 309. In addition, if 
at step 304 the E(i) is "1", it is determined whether the number Nj of the defective HDD 
devices existing within the j-numbered logical drive is more than two (step 307). If the 
Nj is two or more, after "1" is added to the temporary counter Nequal (step 308), a 
transfer is made to step 309. If the Nj is less than two, the flow proceeds to step 309 

15 intact. 

[0060] At step 309, "1" is added to the counter] for identifying the logical drive, then it is 
determined at step 310 whether the value of the j Is equal to or smaller than the 
number of all the logical drives. If the j is equal to smaller than the number of all the 
logical drives, the disk an^y controller 1 3 repeats the processing operations that are 

20 performed from step 303. If the j is above the number of all the logical drives, it is 

checked whether the temporary counter Nequal is "0" (step 311). When the Nequal is 
not "0", it falls upon either a case where two or more defective HDD devices exist within 
the logical drive having the Nnew numbered HDD device located therewithin and 
therefore restoration is impossible or a case where, other than the logical drive within 

25 which the Nnew numbered HDD device exists, there is a defective HDD device the 



characteristic information of which is the same as that of the Nnew numbered HDD 
device and the number of which is two or more and therefore it is likely thai the 
with-use-of-redundancy data constnjction will collapse. Therefore, the controller 1 3 
reports an error message to the higher-order device 21 (step 317) and temninates this 
5 processing. If at step 311 the temporary counter Nequal is "0", the flow proceeds to 
step 312. 

[0061] At step 312, the characteristic information A(Nnew) of the Nnew numbered HDD 
device is set with respect to the characteristic information B(Nnew) of the NNEW 
numbered non-volatile memory, and the characteristic information B(Nnew) of tiie Nnew 

10 numbered non-volatile memory is written ttiereinto. And at step 31 3, it is determined 
whetiier write of the characteristic information B(Nnew) into tiie Nnew numbered 
non-volatile memory has normally been performed. When that write-in has normally 
been performed, Uie flow proceeds to step 314. When ttiat write-in has not normally 
been performed, ttie controller 1 3 reports an error message to tiie higher-order device 

15 21 (step 31 7), and tiien terminates Uie processing. 

[0062] At step 314, "1" is set with respect to \Sne management information D(Nnew) tiiat 
represents tfie status of being restored of tiie Nnew numbered HDD device destined for 
restoration, tiiereby that management information is written into tiie non-volatile 
memory 1 9 ttiat stores tiierein the management information. And it is determined 

20 whetiier write of the management information D(Nnew) Vnai represents tiie status of 
being restored into tiie non-volatile memory 19 that stores therein the management 
information has normally been perf'ormed (step 31 5). When that write has not 
normally been performed, tiie contit)ller 1 3 reports to tiie higher-order device 21 an 
error message to tiie effect of being a defective disk array apparatus (step 31 7) and 

25 tiien terminates tiie processing. On tiie otiier hand, when having normally been 



performed at step 31 5, the controller 13 starts restoration of the HDD device (step 316). 
and then terminates the processing operations. 

[0063] The disk array apparatus according to this embodiment that has been explained 
above has a construction of being equipped >/vith the non-volatile memories for storing 
5 therein the characteristic infomnation correspondingly to the individual HDD devices 
and of using, separately from those memories, the non-volatile memory for storing 
therein the management information. However, the construction of the disk array 
apparatus to which the present invention is applied Is not limited to that constmction. 
For example, it may be arranged that the non-volatile memories for storing therein the 

1 0 characteristic information be unified into one non-volatile memory, thereby the storing 
area of this non-volatile memory is divided into regions for storing therein the 
characteristic information of the individual HDD devices. Or it may be arranged that 
the management information and characteristic information be all stored into a single 
piece of non-volatile memory in the way in which this memory area is divided into 

1 5 storage regions corresponding to those items of information. When it has been 
arranged that all the diaracteristic information be stored into a single piece of 
non-volatile memory, the enor message that is to be reported to the higher-order 
device is used as the one the error of which means a defective disk array apparatus. 
The reason for this is as follows. When the non-volatile memory for storing the 

20 characteristic information has been made one in number, failing to perform read-out or 
write-in with respect to one region within that non-volatile memory results in that the 
operation of that non-volatile memory itself is abnormal. Therefore, even if 
succeeding in performing read-out or write-in with respect to the other regions of that 
memory, the reliability of such data t)ecomes seriously decreased. Therefore, it is 

25 better not to use that memory. Concretely, in the disk array controller 1 3, it is arranged 
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that, instead of the characteristic information write-in defect detection unit that 
processes the error message as being a defective HDD device, there be provided a 
non-volatile memory information write-in defect detection unit that processes the error 
message as toeing a defective disk array apparatus. 
5 [0064] Also, in the disk array apparatus of the above-described emtx)diment. it adopts 
a with-use-of-redundancy data construction enabling the restoration of only one HDD 
device. However, it is possible to increase the parameters for discriminating defective 
HDD devices in corresponding relationship to the number of the defective HDD 
devices that can be restored and to execute control that is performed, according to the 

10 branch conditions, using the counter that indicates the number of the defective HDD 
devices. By doing so, it is possible to adopt a with-use-of-fedundancy data 
constnjction that enables restoration of two or more defective HDD devices. In 
addition, in the above-described disk array apparatus, it is arranged that, when 
re-<:losing the power source of a defective HDD device, restoration be performed with 

15 respect to the part of the HDD devices which can automatically be restored. However, 
without providing that mechanism, it is possible to construct so that the restoring 
operation may be started in accordance with the instruction command that is issued 
from the higher-order device. 
[0065] 

20 [Effect of the Invention] As has been described above, according to the present 
invention, when an HDD device has t>een replaced during the operation of the disk 
array apparatus, the status of that replacement HDD device is automatically detected 
and, simultaneously therewith, the defect of the non-volatile memory also is detected. 
As a result of this, the effect is brought atx)ut that the erroneous operation of the 

25 replacement HDD device can be prevented from occurring. In addition, by detecting 



the misconnection, as well, of the HDD device, the effect is brought about that relevant 
data can be prevented from being lost due to the human mistakes. 
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